On Thu, Jan 21, 2010 at 2:43 PM, Brian Evans - Postfix List
<[email protected]> wrote:

> This is a client IP not a sender, e. g. 'MAIL FROM: [email protected]'
>
> The IP should go into a file referenced by a check_client_access
> restriction.

I think I still don't have a understanding at how to properly read /
understand message headers in order to create good filters in Postfix.
I am very sorry for my confusion but can someone please tell me what
the difference is between these two IP's I show in the headers. I am
guessing one IP is the actual 'senders' IP address in which is
initiating SMTP from using a client like Outlook / Thunderbird and the
other IP I am guessing is the address of the senders SMTP server which
establishes a connection with my Postfix MTA, right? Do I at least
have this correct?

I am looking at these headers:

*******************************************************************************

Return-path: <[email protected]>
X-original-to: [email protected]
Delivered-to: [email protected]
Received: from localhost (localhost.localdomain [127.0.0.1]) by
mail.iamghost.com (Postfix) with ESMTP id 8A54C77A8E9 for
<[email protected]>; Fri, 22 Jan 2010 05:29:33 -0500 (EST)
Received: from mail.iamghost.com ([127.0.0.1]) by localhost
(iamghost.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id
eY2CHd1Jva+X for <[email protected]>; Fri, 22 Jan 2010 05:29:31
-0500 (EST)
Received: from civismtp.uas.coop (civismtp.uas.coop [67.212.170.242])
by mail.iamghost.com (Postfix) with ESMTP id C00DB77A862 for
<[email protected]>; Fri, 22 Jan 2010 05:29:30 -0500 (EST)
Received: from wfmc.org (HELO www.wfmc.org) (192.220.23.216)
(smtp-auth username editor, mechanism cram-md5) by civismtp.uas.coop
(qpsmtpd/0.40) with ESMTPA; Fri, 22 Jan 2010 03:50:52 -0600
Mime-version: 1.0
Reply-to: [email protected]
From: "BPM Times" <[email protected]>
Subject: BPM Times January 2010
List-unsubscribe: "" <mailto:[email protected]>
To: "[email protected]" <[email protected]>
Content-type: multipart/alternative;
boundary="=_6f6883e747bd1842f9d8a495eff04b03"
Date: 01/22/2010 05:29:29 AM
Message-id: <[email protected]>

*******************************************************************************

There are two (2) 'Received: from' lines which both have two
completely different IP's. One has a HELO & 'smtp-auth' username
(editor) which I assume this line to be the client sending the
message, not the MTA, is this correct?

Any clarification is greatly appreciated.

Reply via email to